$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft File: Z849nCahS83_mzOU0zVXZoIYoVY.mft (raw, json) Hash identifier: Kxr/I+Yc0HkAjj9ZL42JytzNK4/7yISfYhTW7x0J3eo= Subject key identifier: 0B:E9:15:32:3F:30:14:96:EB:90:38:EE:C4:22:44:31:3F:A7:B7:EA Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft Manifest number: EF Signing time: Wed 13 May 2026 06:32:02 +0000 Manifest this update: Wed 13 May 2026 06:32:02 +0000 Manifest next update: Wed 20 May 2026 06:32:02 +0000 Files and hashes: 1: Z849nCahS83_mzOU0zVXZoIYoVY.crl (hash: 3GEhTOz/Yq7aznJ2pbd6OAJai3ngOMYhXlUTlzPRtXc=) 2: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (hash: 1dR8cu3JeKWiVz0aJKgDN3j35TtK4bIh995eeCzg8so=) 3: 4550C0B2E86D11EF9AF14D6FC4F9AE02.roa (hash: ILjG6j0hahE7eMi9C3vJ2iRVu5oKmSFIClvho3Bi50s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 06:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156 Validity Not Before: May 13 06:32:02 2026 GMT Not After : May 20 06:32:02 2026 GMT Subject: CN=6a041ae2-de10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:71:be:e5:e9:d8:56:b5:b6:b0:b0:cb:a5: 66:8f:03:ab:3f:5f:5d:f3:1b:64:4a:f6:e1:75:26: 21:1e:2e:34:c3:3d:ae:92:95:a6:38:7a:e7:fc:fa: 86:a2:74:5f:9a:46:2c:48:fa:dc:c4:be:71:59:b0: da:3e:5c:24:73:04:1f:8b:22:7c:0f:05:ef:76:66: b6:b0:fe:c0:f6:58:c2:ad:65:4e:d8:25:53:12:d2: e7:fc:0c:09:59:ad:52:b2:ae:80:62:9b:6d:b3:09: a5:6d:a0:7c:41:1a:f8:19:ed:f9:eb:fe:8f:cf:c3: de:b2:25:06:75:cb:2a:bf:9b:cc:c2:a0:c8:2c:81: be:0b:58:bc:67:b5:64:f8:9c:2e:38:34:68:f8:93: ef:73:a9:46:be:33:cf:74:a2:d9:dc:a3:62:94:16: 9a:cf:cb:9a:f8:25:cc:9b:c4:19:6b:83:ee:4e:d7: 82:2e:4b:af:cb:d6:e9:0e:cf:97:f1:05:32:7e:16: 1f:d5:d0:b6:f8:b1:93:02:9d:e0:83:0f:d4:e6:f1: 29:08:6e:e0:e1:c4:3e:d1:3b:ab:aa:db:99:0d:0b: 71:19:6e:06:bf:37:d0:ff:91:7e:0e:13:8f:c1:a9: 74:58:e9:94:7a:37:e6:e2:e6:cd:a0:00:fe:53:7b: 24:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E9:15:32:3F:30:14:96:EB:90:38:EE:C4:22:44:31:3F:A7:B7:EA X509v3 Authority Key Identifier: keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:13:b9:3a:ac:55:c0:38:78:cf:3d:6f:49:2e:dc:21:54:4f: 9c:cc:08:8a:c1:ab:37:c7:ca:7a:58:3c:ce:f3:b0:bb:69:3f: b7:12:73:49:bd:f9:43:4d:9a:43:dc:8c:26:3d:32:e7:4d:f3: ee:29:49:04:88:ad:55:db:b1:e1:0a:69:db:05:70:df:80:87: e2:c9:ca:eb:f2:ec:6a:42:1c:39:f4:eb:3e:fe:3e:93:18:29: 84:55:de:c4:85:72:18:37:c9:c1:39:2d:7c:ce:7d:a7:20:ad: b7:19:9f:d4:8c:b3:1f:c3:43:b1:ee:b3:81:16:a1:40:8c:14: 39:5d:4a:70:bf:3c:b5:a4:5d:1d:04:49:8b:db:ec:41:16:87: 57:f7:49:c9:e8:42:05:c9:c4:22:1a:c0:00:c0:95:c6:47:96: 23:34:6d:be:6f:dd:41:ea:78:4b:37:eb:8b:41:8c:92:d0:d2: 9a:5d:74:80:84:53:c1:a2:64:78:58:4b:3b:dc:df:c0:87:ef: fc:5b:fe:e0:46:55:ef:c6:4d:56:5b:58:97:79:06:a3:a2:b0: 73:a6:aa:00:dc:d3:9d:e5:2b:7a:b9:97:2c:69:1d:14:76:06: b9:9a:d8:07:b6:75:c0:68:12:bb:8a:93:cc:5b:42:ef:a5:f2: 1d:e2:3d:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2 ODIxOEExNTYwHhcNMjYwNTEzMDYzMjAyWhcNMjYwNTIwMDYzMjAyWjAYMRYwFAYD VQQDEw02YTA0MWFlMi1kZTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM1xvuXp2Fa1trCwy6VmjwOrP19d8xtkSvbhdSYhHi40wz2ukpWmOHrn/PqG onRfmkYsSPrcxL5xWbDaPlwkcwQfiyJ8DwXvdma2sP7A9ljCrWVO2CVTEtLn/AwJ Wa1Ssq6AYpttswmlbaB8QRr4Ge356/6Pz8PesiUGdcsqv5vMwqDILIG+C1i8Z7Vk +JwuODRo+JPvc6lGvjPPdKLZ3KNilBaaz8ua+CXMm8QZa4PuTteCLkuvy9bpDs+X 8QUyfhYf1dC2+LGTAp3ggw/U5vEpCG7g4cQ+0TurqtuZDQtxGW4GvzfQ/5F+DhOP wal0WOmUejfm4ubNoAD+U3skVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvpFTI/ MBSW65A47sQiRDE/p7fqMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4 NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTU1Ny85MjY4M0UzQUU4NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4 M19tek9VMHpWWFpvSVlvVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlRO5OqxVwDh4zz1vSS7cIVRPnMwIisGrN8fKelg8zvOwu2k/txJzSb35Q02a Q9yMJj0y503z7ilJBIitVdux4Qpp2wVw34CH4snK6/LsakIcOfTrPv4+kxgphFXe xIVyGDfJwTktfM59pyCttxmf1IyzH8NDse6zgRahQIwUOV1KcL88taRdHQRJi9vs QRaHV/dJyehCBcnEIhrAAMCVxkeWIzRtvm/dQep4Szfri0GMktDSml10gIRTwaJk eFhLO9zfwIfv/Fv+4EZV78ZNVltYl3kGo6Kwc6aqANzTneUrermXLGkdFHYGuZrY B7Z1wGgSu4qTzFtC76XyHeI9Ug== -----END CERTIFICATE-----Generated at Wed May 13 13:23:01 2026 by rpki-client